CVE-2014-1445: The wanxl_ioctl function in drivers/net/wan/wanxl.c in the Linux kernel before 3.11.7 does not properly ini...

Security readout for executives and security teams

CVE-2014-1445 is a Linux kernel information leak in the wanxl ioctl handler. A local user could receive uninitialized kernel memory. The cited sources do not show remote exploitation or active exploitation; the main business concern is sensitive data exposure on systems allowing local user access. Exposure is most likely on Linux systems running vulnerable kernel builds with the WAN XL driver code present and accessible to local users. The provided sources do not identify remote attack surface or broad internet exposure. Treat as a maintenance-priority kernel patching issue, higher where shared accounts, shell access, or multi-tenant workloads exist. It does not currently justify emergency response based on the supplied evidence. Mitigation focus: Apply vendor kernel updates that include the upstream 3.11.7 fix or backport.; Check Ubuntu, Red Hat, or applicable distribution guidance for fixed package status.; Upgrade unsupported or custom kernels that predate the fix..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.